Consumer Health Data Privacy Policy
Effective date: July 8, 2026 · SHORESIDE LLC d/b/a BreathBeats · [email protected]
This policy applies to "consumer health data" as defined by the Washington My Health My Data Act, Nevada's consumer health data law (SB 370), and the Connecticut Data Privacy Act's health-data provisions, and supplements our Privacy Policy. It is written to apply to all BreathBeats users; the specific legal rights below are guaranteed to Washington, Nevada, and Connecticut residents and extended to others where their law provides similar rights.
What consumer health data we collect
- Self-reported wellbeing ratings you choose to enter before or after a session: mood, stress level, energy level, and anxiety level (numeric scales), and optional free-text session notes. All of these are optional and skippable.
- Breathing activity data: the breathing technique or genre used, the reason or goal you select for a session (for example, sleep, focus, stress, or an anxious moment), session timing/duration/completion, streaks, and total practice minutes.
- Camera-derived breathing signals, processed on your device: in camera mode, your device analyzes camera frames in real time to detect breathing-related motion. Images never leave your phone. Limited derived, non-identifying quality signals (for example, a session detection-accuracy score and whether mouth-breathing was detected for exhale guidance) are stored with your session record.
- Inferences drawn from the above to personalize your experience (for example, your favorite technique).
We do not collect: biometric identifiers used to identify you; precise location; reproductive or sexual health information; genetic data; or health records from providers.
Sources
All consumer health data comes directly from you (what you enter) and from your use of the App on your device (session activity and on-device camera processing). We do not buy, receive, or derive consumer health data from third parties or other apps.
Why we collect and use it
Solely to provide the services you request: running sessions, showing your history and progress, personalizing techniques and sound, and supporting you when you ask for help. Collection and use are limited to what is reasonably necessary to provide these features. We do not use consumer health data for advertising, and we do not sell it — and we will not, absent your valid, separate, signed authorization (which we do not currently seek from anyone).
Consent
Where law requires consent to collect consumer health data beyond what is necessary to provide a service you've requested, we obtain it through a clear, affirmative in-App action before collection (for example, the optional wellbeing check-in you can skip, and the explicit camera-mode enablement screen). We do not use dark patterns to obtain consent. You may withdraw consent at any time (below).
Who can access it / sharing
We do not share, sell, or disclose consumer health data to any third party or affiliate. Access is restricted to personnel who need it to operate the service, and to processors bound by contract to process it solely on our instructions. The only category of processor that stores or processes consumer health data is our cloud hosting and database provider (the infrastructure where session data is stored), contactable via us at [email protected]; we will disclose the provider's identity on request. No other provider (including our analytics, email, payment, or newsletter providers) receives consumer health data. We do not share consumer health data with advertisers, data brokers, or social networks, and we will not sell consumer health data — a sale would require your separate, signed authorization, which we do not seek. No affiliates other than SHORESIDE LLC operate BreathBeats.
Your rights
You have the right to: (1) access your consumer health data, including a list of the third parties and affiliates with whom we have shared it (see above — processors only) and an active email address to contact them via us; (2) withdraw consent to our collection and sharing of consumer health data; and (3) delete your consumer health data, including from our backups on their normal deletion cycle and, upon your request, we will instruct our processors to do the same.
How to exercise them: in the App (Settings → Account — delete account/data; skip or stop wellbeing check-ins; turn camera mode off at any time) or by emailing [email protected] from your account email. We will respond within 45 days, extendable once by 45 days where reasonably necessary (Connecticut residents: within 60 days where its law applies). If we decline a request, we will explain why and how to appeal: reply to our decision and your appeal will be reviewed by a different decision-maker. If your appeal is denied: Washington residents may contact the Washington Attorney General at atg.wa.gov/file-complaint; Nevada residents may contact the Nevada Attorney General at ag.nv.gov/Complaints/File_Complaint/; Connecticut residents may contact the Connecticut Attorney General at portal.ct.gov/ag.
We will never discriminate against you — including changing price or service quality — for exercising any of these rights.
Changes and contact
Material changes to this policy will be notified in the App or by email before they take effect. Questions: [email protected] · SHORESIDE LLC, 221 1st Ave SW, Suite 610, Rochester, MN 55902.